Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
File:                     d2c7549d-7dcf-3897-85fa-69af9d414cee.roa (raw, json)
Hash identifier:          ko45sdABts0XOQXMf67mfUd+4DPvhIwJpeRQFtajc2g=
Subject key identifier:   5A:5E:BA:5F:03:49:ED:56:85:72:17:4E:D9:08:B5:6E:17:A7:74:6C
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F43285849B31B1C4C0786C18FEB4D2780
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa
Signing time:             Wed 30 Apr 2025 16:38:09 +0000
ROA not before:           Wed 30 Apr 2025 16:38:09 +0000
ROA not after:            Tue 29 Jul 2025 16:38:09 +0000
asID:                     45691
IP address blocks:        130.51.98.0/24 maxlen: 24
                          130.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:1b:1c:4c:07:86:c1:8f:eb:4d:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Apr 30 16:38:09 2025 GMT
            Not After : Jul 29 16:38:09 2025 GMT
        Subject: CN=020f7f12-7697-4c38-80e2-40993d0be7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:7a:6b:7f:4d:9d:90:4f:e8:3a:a2:44:f3:
                    e2:04:fb:0b:aa:e1:a3:1c:d2:4b:e4:c4:40:35:e5:
                    b0:25:7a:24:67:0a:be:77:5b:c5:fc:ab:c6:4e:a0:
                    7b:20:45:82:0a:a6:5b:76:e0:10:67:49:e6:cc:4f:
                    bc:5a:0c:bf:e5:b0:c1:a9:eb:ec:7d:ad:e6:c8:00:
                    99:74:b7:fe:ab:c8:6f:ce:5e:4b:df:66:45:34:a0:
                    ef:f8:e5:1b:7b:09:b4:5d:15:f7:28:0a:6b:a4:8f:
                    08:b2:aa:07:f3:ae:73:fa:1b:ee:fd:42:4f:97:6a:
                    c5:76:25:c7:30:9e:0e:20:7c:74:44:8e:15:62:80:
                    34:23:39:80:a2:86:5b:32:c0:75:bd:b4:37:68:04:
                    f7:01:98:85:ae:03:c5:cf:eb:3b:0c:92:0f:84:cb:
                    8f:4d:2f:92:b0:87:8c:52:46:f2:20:22:f1:84:fa:
                    fe:9f:67:25:60:55:68:c1:9f:80:63:5e:1c:ff:9b:
                    5a:8a:32:98:c7:55:39:f7:fe:81:a8:2c:23:4e:f2:
                    df:a9:9b:84:0a:01:9a:7e:11:9e:83:19:ad:8a:ce:
                    d6:3d:b2:7a:7b:13:8d:68:5c:2d:51:b0:b1:63:8f:
                    0e:c6:f6:f0:e0:1b:ca:17:9f:2a:a5:de:7b:d1:99:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:BA:5F:03:49:ED:56:85:72:17:4E:D9:08:B5:6E:17:A7:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d2c7549d-7dcf-3897-85fa-69af9d414cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bf:88:22:cf:ac:d9:f7:fb:e4:da:66:2d:1e:97:23:2d:7b:
         58:f2:1c:1f:78:ff:61:91:d5:0a:97:f1:8e:16:99:d2:79:04:
         28:a7:b2:4d:db:20:92:f0:db:00:b4:61:26:00:ee:e5:98:19:
         d3:eb:29:ae:dc:6a:07:88:df:dc:8a:5e:bd:1e:03:41:40:fe:
         a1:d3:07:5b:88:cc:12:82:82:cf:f4:5d:06:33:d8:c6:32:e8:
         ad:d5:8d:83:36:f0:af:e8:60:b2:ec:02:43:64:91:33:8f:7e:
         47:9a:28:f8:d3:f2:b4:07:b3:e4:00:54:bc:66:af:fe:dc:31:
         6c:e0:75:41:2c:7b:fe:aa:ef:4c:c8:31:c8:49:4c:20:d1:b3:
         6c:1a:93:4f:95:94:22:b0:22:61:d2:6b:69:a5:21:c0:06:f1:
         a9:84:70:98:9a:a6:1a:75:2a:76:bb:10:8a:4d:e5:8d:ac:2f:
         70:a5:d7:d5:39:a6:7b:4f:cc:24:9f:8f:f4:21:7c:ed:d7:da:
         96:94:db:09:33:79:37:c0:9b:32:1d:95:7a:52:5d:a4:eb:a2:
         d0:22:b7:f2:1c:61:84:f7:65:92:80:f1:18:18:80:a9:aa:2c:
         b3:fc:ac:fe:23:96:68:75:ea:e4:ee:71:92:ee:91:7e:23:c4:
         78:e4:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:57:30 2025 by rpki-client